Live in production 2026

FisikoTherapyHUB

The hub of physiotherapy — built so the patient sees almost nothing

A Greek physiotherapy platform: appointments, patient records, exercise programmes and subscriptions for the practice — and a deliberately narrow, privacy-first portal for the patient.

Request a demo Visit the site

GDPR

Art. 9(2)(h) by design

2FA

Mandatory on every account

EL/EN

Bilingual from the first screen

The problem

Clinical software usually leaks

A practice needs a real clinical record: diagnoses, session notes, ΑΜΚΑ, uploaded reports. A patient needs two things — the exercises they are supposed to be doing right now, and their next appointment. Most systems build one screen and hide the rest with an if-statement, which is exactly the kind of privacy that fails the first time somebody adds a feature in a hurry.

What we built

A portal with no route to the record

The patient portal does not hide clinical data — it cannot reach it. There is one read path for a patient's own records and it has no method that returns a diagnosis, a note or an expired programme. On top of that sits a bilateral consent model: no practice appears in a patient's portal until that patient has accepted it, including the very first practice that ever entered them into the system.

Inside the product

What is actually in it

01

Appointments, both ways

Staff plan on a full calendar; patients request a slot from an anonymised one that shows "taken" and never a name. A request holds the slot and becomes real when the practice confirms it.

02

Patient records & programmes

The clinical file lives with the practice. Exercise programmes have a date window, and a patient sees a programme only while it is genuinely current — after that it is absent, not greyed out.

03

A library the practice owns

Every practice writes its own exercise library, with its own wording and its own photographs, resized on upload. Nobody puts words in a physiotherapist's mouth.

04

Consent, and two kinds of block

The practice asks, the patient answers, and either side can end it. A cooldown after a refusal, a daily ceiling on requests, and a permanent block that no waiting defeats.

05

Subscriptions & Greek VAT

Tiered plans on real client counts, prorated upgrades, scheduled downgrades, a ΦΠΑ line that is a tax line and not a rounded total, and PDF receipts.

06

Mandatory two-factor & an audit trail

TOTP on every account, enforced as a gate rather than a login step, plus a per-practice activity log that records who changed what — and never quotes the clinical value.

Signature decisions

The calls we would defend

Who it is for

Physiotherapy practices and sole practitioners in Greece, and their patients.

Narrowing a screen does not narrow a right — the portal has no route to clinical data at all.
No practice reaches a patient until that patient has accepted it, whichever side asked first.
The transparency log records that a note changed and never what it says.
A public map of practices built from an offline gazetteer, so no visitor's search leaves the building.